Entry tags:
Check before you hit enter?
The New York Times reported last Thursday (22nd June 2006) on a flawed attempt to prevent disclosure of "sensitive material" in a court case. Prosecutors presented documents in PDF format to court with sections "blacked" out. Those sections, when copied into a text editor, say MS Word, disclosed the supposedly suppressed text ... oops.
The report includes a picture that demonstrates how easy the disclosure process was.
This was such a simple thing to avoid - one extra step in the process could have ensured that this was never going to happen.
Once more, the tool is blamed for blatant user error. Though I suspect the oversight can be sheeted home to a lack of education and awareness of how the tools actually work. I can empathise with the poor intern or junior who got stuck doing the cut and paste and./or file conversion - been there, done that. But hitting "Print to PDF" was not enough here - the "blacked-out" text really ought to have been replaced not just covered up.
WYSIWYG has made people lazy (lazier?) when it comes to creating documents. What You See Isn't All of What Is Actually There. Just because it looks fine on the screen and on the print out, and just because the PDF version doesn't include all the stupid MS metadata, doesn't mean the original data - the data that was actually important to cover up - was adequately masked.
Computers do exactly what you tell them to do, and nothing else. Covering text with black background/foreground really only makes it unreadable - it doesn't replace the text. You have to explicitly replace the text.
The report includes a picture that demonstrates how easy the disclosure process was.
This was such a simple thing to avoid - one extra step in the process could have ensured that this was never going to happen.
Once more, the tool is blamed for blatant user error. Though I suspect the oversight can be sheeted home to a lack of education and awareness of how the tools actually work. I can empathise with the poor intern or junior who got stuck doing the cut and paste and./or file conversion - been there, done that. But hitting "Print to PDF" was not enough here - the "blacked-out" text really ought to have been replaced not just covered up.
WYSIWYG has made people lazy (lazier?) when it comes to creating documents. What You See Isn't All of What Is Actually There. Just because it looks fine on the screen and on the print out, and just because the PDF version doesn't include all the stupid MS metadata, doesn't mean the original data - the data that was actually important to cover up - was adequately masked.
Computers do exactly what you tell them to do, and nothing else. Covering text with black background/foreground really only makes it unreadable - it doesn't replace the text. You have to explicitly replace the text.